asxpi/iac
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ci: Renovate opens version bump PRs with release notes

Browse source 
Versions are pinned across the Ansible vars, compose files, Terraform
providers and workflows, and nothing says when one is behind. Run
Renovate daily from Forgejo Actions: one PR per available bump, with
the upstream changelog in the body, which the deploy pipeline then
dry-runs like any other branch.

Variables are tracked through a "# renovate: datasource=... depName=..."
comment above them; Forgejo, Traefik, the runner and its nix image get
one here. The Paper JRE tag is left alone, the runner and nix bumps
carry their manual follow-up steps in the PR, and Renovate's own image
is bumped monthly.

Needs the repository secrets RENOVATE_TOKEN (bot user with write
access) and GH_COM_TOKEN (read-only github.com token for release
notes).

Assisted-by: Claude:opus-5-5
This commit is contained in:
Sergei Poljanski 2026-11-12 21:20:47 +04:00
commit 2aca0d7669
5 changed files with 77 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
ansible/inventory/group_vars/ops_servers/forgejo.yaml
View file

@ -1,4 +1,5 @@
---
# renovate: datasource=docker depName=codeberg.org/forgejo/forgejo
forgejo_version: "15.0.11"
# The instance answers on every name below. forgejo_domain is the